last executing test programs: 55.628343956s ago: executing program 1 (id=2324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca87, 0x0, 0x0, 0x4}) inotify_init1(0x800) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) 54.525762478s ago: executing program 1 (id=2327): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000002a80)=""/4096}) 53.676107852s ago: executing program 1 (id=2330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e2", 0x3f}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 52.346449913s ago: executing program 1 (id=2338): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0) 50.596388695s ago: executing program 4 (id=2341): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 48.050124681s ago: executing program 1 (id=2348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36d", 0x10}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 46.948313065s ago: executing program 1 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(r4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = dup(r1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 43.19521272s ago: executing program 3 (id=2364): syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000001700)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000006c0)={0xffffffffffffffff, 0x0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) splice(r2, 0x0, r0, 0x0, 0x9, 0x1200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000100)={0x1d, r6}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d09f91b0b380987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f37096c060890e0878f0e1ac6e7049b094a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004c0400000000000000ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885e94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffd6f}}, 0x1006) 37.278068437s ago: executing program 3 (id=2374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ed", 0x90}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 37.277806541s ago: executing program 4 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="bfd6cf0b15b3aed141b03cc8cc533bd89f42a457802fe160d2131543d0a44ab771ddc019914947c1b686c507bb7cccea7e1e8c1c0fe1bed67de1b345932dc8940b114dc9e8a4dc18ae75ae3c8539ae89b93aa65f", @ANYRES64=0x0], 0x20) 36.979938591s ago: executing program 4 (id=2377): sendmsg$key(0xffffffffffffffff, 0x0, 0x4004080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 36.874656367s ago: executing program 3 (id=2378): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) syz_io_uring_setup(0x51fd, &(0x7f00000000c0)={0x0, 0xaf3d, 0x1000, 0x1, 0x388}, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff040000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f000000b000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f000000c000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1820000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000001c0)="be0cf5995c041b39", 0x8}, {0x0}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="1000c100020000000000000007000000"], 0x10}, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) fcntl$dupfd(r3, 0x0, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r2, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}, 0x1d}], 0x1, 0x10102, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 36.285780263s ago: executing program 4 (id=2380): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010065"], 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040400000000000000b2f50c0a"], 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff070000000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 35.416328535s ago: executing program 2 (id=2382): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 35.242506368s ago: executing program 3 (id=2384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 34.453998047s ago: executing program 2 (id=2385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(r4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = dup(r1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 34.451627241s ago: executing program 4 (id=2386): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}], 0x1, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2e", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 34.017518048s ago: executing program 3 (id=2388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ed", 0x90}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea4b2ec5", 0x34}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 34.0171512s ago: executing program 2 (id=2389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 33.996703527s ago: executing program 4 (id=2390): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 33.28824822s ago: executing program 2 (id=2392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x5, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 32.258374522s ago: executing program 3 (id=2393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(r4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = dup(r1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8001, 0x2) 31.869121821s ago: executing program 2 (id=2394): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x7ea, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xde, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x5, 0x0, 0x100, 0x1, 0x1]}, &(0x7f00000004c0)=0x78) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 31.520269055s ago: executing program 32 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(r4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = dup(r1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) 31.187376931s ago: executing program 2 (id=2396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0xa, 0x6b1, 0x4004, 0xfffffff7, 0x4be1}, {0x6, 0x3, 0x400ffc, 0x3, 0x804}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1, 0x1, 0x1, 0x946, 0x5, 0x8, 0x3}, {0x6, 0x80000000, 0x0, 0x4, 0x6, 0x10, 0x8}]}) (fail_nth: 1) 22.138710471s ago: executing program 0 (id=2399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x20040051) 21.418682635s ago: executing program 0 (id=2400): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.971395499s ago: executing program 0 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) (fail_nth: 1) 18.152127232s ago: executing program 0 (id=2402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x1, 0x80000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x2, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000180)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000000040)="a00037bbfa9ba1ce", 0x8, 0x4090, &(0x7f0000001100)={0xa, 0x4e24, 0x10001, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000001580)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001540)=""/62, 0x3e}, 0xfffffffc}], 0x1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) 18.046364034s ago: executing program 33 (id=2390): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 17.044774203s ago: executing program 0 (id=2404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.434832587s ago: executing program 34 (id=2393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sched_getscheduler(r4) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) getpgid(0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = dup(r1) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8001, 0x2) 15.970786753s ago: executing program 35 (id=2396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0xa, 0x6b1, 0x4004, 0xfffffff7, 0x4be1}, {0x6, 0x3, 0x400ffc, 0x3, 0x804}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0x1, 0x1, 0x1, 0x946, 0x5, 0x8, 0x3}, {0x6, 0x80000000, 0x0, 0x4, 0x6, 0x10, 0x8}]}) (fail_nth: 1) 15.731165907s ago: executing program 0 (id=2407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xffff1000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x1, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0x8, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xec, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x29000, 0x3, 0x6, 0x6, 0x1, 0x9, 0x2, 0x3, 0x13, 0x0, 0xe4}, {0x200000, 0xb000, 0x9, 0x0, 0x6, 0x71, 0xde, 0x9, 0xb, 0xdf, 0x4, 0x30}, {0x33326001, 0x6000, 0xe, 0x4, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x40000, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0xfd, 0x0, 0xb, 0x8, 0x0, 0xff, 0xff, 0x4, '\x00', 0x0, 0x77}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xb}, {0x9, 0x89, 0xc, '\x00', 0xff}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x2e}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 0s ago: executing program 36 (id=2407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xffff1000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x1, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0x8, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xec, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x29000, 0x3, 0x6, 0x6, 0x1, 0x9, 0x2, 0x3, 0x13, 0x0, 0xe4}, {0x200000, 0xb000, 0x9, 0x0, 0x6, 0x71, 0xde, 0x9, 0xb, 0xdf, 0x4, 0x30}, {0x33326001, 0x6000, 0xe, 0x4, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x40000, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0xfd, 0x0, 0xb, 0x8, 0x0, 0xff, 0xff, 0x4, '\x00', 0x0, 0x77}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xb}, {0x9, 0x89, 0xc, '\x00', 0xff}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x2e}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) kernel console output (not intermixed with test programs): b 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.284369][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.284388][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.284399][ T43] usb 2-1: Product: syz [ 323.284406][ T43] usb 2-1: Manufacturer: syz [ 323.284414][ T43] usb 2-1: SerialNumber: syz [ 323.477492][ T43] usb 2-1: 0:2 : does not exist [ 323.653248][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 324.487198][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 324.487224][ T60] Bluetooth: unknown link type 10 [ 324.487249][ T60] Bluetooth: hci4: connection err: -111 [ 324.499993][ T43] usb 2-1: USB disconnect, device number 20 [ 324.586914][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 324.586934][ T60] Bluetooth: unknown link type 10 [ 324.586954][ T60] Bluetooth: hci0: connection err: -111 [ 325.498385][ T8466] udevd[8466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.065484][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 327.065512][ T60] Bluetooth: unknown link type 10 [ 327.065535][ T60] Bluetooth: hci3: connection err: -111 [ 328.542556][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 328.750122][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 328.750146][ T60] Bluetooth: unknown link type 10 [ 328.750171][ T60] Bluetooth: hci0: connection err: -111 [ 329.408897][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 329.408921][ T60] Bluetooth: unknown link type 10 [ 329.408946][ T60] Bluetooth: hci1: connection err: -111 [ 330.365052][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 330.365080][ T60] Bluetooth: unknown link type 10 [ 330.365105][ T60] Bluetooth: hci3: connection err: -111 [ 330.534263][ T5805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 330.697478][ T5805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.697512][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.697539][ T5805] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 330.697552][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.775771][ T5805] usb 5-1: config 0 descriptor?? [ 330.794295][ T5805] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 331.566134][ T5884] usb 5-1: USB disconnect, device number 8 [ 334.344128][ T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 334.514250][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 334.518260][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.518286][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.550085][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.550110][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.550120][ T44] usb 2-1: Product: syz [ 334.550127][ T44] usb 2-1: Manufacturer: syz [ 334.550135][ T44] usb 2-1: SerialNumber: syz [ 334.623724][ T44] usb 2-1: 0:2 : does not exist [ 334.868056][ T44] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 335.183417][ T44] usb 2-1: USB disconnect, device number 21 [ 335.536558][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 335.536584][ T60] Bluetooth: unknown link type 10 [ 335.536606][ T60] Bluetooth: hci1: connection err: -111 [ 335.614290][ T8466] udevd[8466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.384757][T10173] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96 [ 339.055185][T10179] input: syz0 as /devices/virtual/input/input49 [ 339.503249][ T60] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 339.503274][ T60] Bluetooth: unknown link type 10 [ 339.503297][ T60] Bluetooth: hci2: connection err: -111 [ 340.138294][T10208] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1715'. [ 341.205839][T10230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1724'. [ 341.380354][T10233] input: syz0 as /devices/virtual/input/input51 [ 341.884499][T10239] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1728'. [ 341.983159][ T60] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 341.983186][ T60] Bluetooth: unknown link type 10 [ 341.983210][ T60] Bluetooth: hci2: connection err: -111 [ 345.112150][T10290] loop2: detected capacity change from 0 to 7 [ 345.116403][T10290] Dev loop2: unable to read RDB block 7 [ 345.116434][T10290] loop2: AHDI p1 p2 p3 [ 345.116463][T10290] loop2: partition table partially beyond EOD, truncated [ 345.116676][T10290] loop2: p1 start 1601398130 is beyond EOD, truncated [ 345.116694][T10290] loop2: p2 start 1702059890 is beyond EOD, truncated [ 346.467888][T10299] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1749'. [ 347.492367][T10331] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1763'. [ 347.600571][T10333] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1762'. [ 347.965722][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 347.965747][ T60] Bluetooth: unknown link type 10 [ 347.965770][ T60] Bluetooth: hci4: connection err: -111 [ 348.434109][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 348.598584][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 348.600373][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 348.600398][ T44] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 348.600419][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 348.600434][ T44] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.600447][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.600459][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.600473][ T44] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 348.600487][ T44] usb 4-1: config 168 interface 0 has no altsetting 0 [ 348.604831][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 348.604855][ T44] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 348.604884][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 348.604899][ T44] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.604912][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.604924][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.604937][ T44] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 348.604951][ T44] usb 4-1: config 168 interface 0 has no altsetting 0 [ 348.609175][ T44] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 348.609212][ T44] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 348.609259][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 348.609284][ T44] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.609307][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.609331][ T44] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 348.609355][ T44] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 348.609380][ T44] usb 4-1: config 168 interface 0 has no altsetting 0 [ 348.617978][ T44] usb 4-1: string descriptor 0 read error: -22 [ 348.618109][ T44] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 348.618130][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.847271][ T44] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 349.355150][ T5884] usb 4-1: USB disconnect, device number 16 [ 349.375091][T10358] loop2: detected capacity change from 0 to 7 [ 349.424279][T10358] Dev loop2: unable to read RDB block 7 [ 349.424329][T10358] loop2: unable to read partition table [ 349.424538][T10358] loop2: partition table beyond EOD, truncated [ 349.424556][T10358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.321750][T10365] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1775'. [ 350.816602][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 350.816628][ T60] Bluetooth: unknown link type 10 [ 350.816651][ T60] Bluetooth: hci4: connection err: -111 [ 351.386796][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 351.386851][ T60] Bluetooth: hci0: connection err: -111 [ 352.421496][T10411] netlink: 'syz.2.1794': attribute type 72 has an invalid length. [ 353.246733][T10428] loop2: detected capacity change from 0 to 7 [ 353.307447][T10428] Dev loop2: unable to read RDB block 7 [ 353.309479][T10428] loop2: unable to read partition table [ 353.312240][T10428] loop2: partition table beyond EOD, truncated [ 353.313546][T10428] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.769640][ T60] Bluetooth: hci2: unexpected event 0x04 length: 13 > 10 [ 356.769664][ T60] Bluetooth: unknown link type 10 [ 356.769688][ T60] Bluetooth: hci2: connection err: -111 [ 357.084524][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 357.084553][ T60] Bluetooth: unknown link type 10 [ 357.084579][ T60] Bluetooth: hci1: connection err: -111 [ 359.072793][T10528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1843'. [ 359.114099][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 359.267064][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 359.267110][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 359.268497][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 359.268524][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 359.268544][ T9] usb 3-1: Manufacturer: syz [ 359.326114][ T9] usb 3-1: config 0 descriptor?? [ 359.329888][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 359.573854][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 359.573881][ T60] Bluetooth: unknown link type 10 [ 359.573913][ T60] Bluetooth: hci0: connection err: -111 [ 360.282168][T10544] input: syz1 as /devices/virtual/input/input52 [ 361.964055][ T44] usb 3-1: USB disconnect, device number 20 [ 362.629502][T10592] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1868'. [ 362.929680][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 362.929705][ T60] Bluetooth: unknown link type 10 [ 362.929729][ T60] Bluetooth: hci4: connection err: -111 [ 364.174871][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 364.174897][ T60] Bluetooth: unknown link type 10 [ 364.174922][ T60] Bluetooth: hci0: connection err: -111 [ 365.715630][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 365.715648][ T60] Bluetooth: unknown link type 10 [ 365.715664][ T60] Bluetooth: hci1: connection err: -111 [ 366.805594][T10666] input: syz0 as /devices/virtual/input/input53 [ 366.843220][T10670] nbd: socks must be embedded in a SOCK_ITEM attr [ 367.260894][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 367.260933][ T60] Bluetooth: hci0: connection err: -111 [ 367.361491][T10679] input: syz0 as /devices/virtual/input/input54 [ 368.105118][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 368.105143][ T60] Bluetooth: unknown link type 10 [ 368.105166][ T60] Bluetooth: hci4: connection err: -111 [ 369.011147][T10725] input: syz0 as /devices/virtual/input/input55 [ 369.501170][T10703] uprobe: syz.0.1911:10703 failed to unregister, leaking uprobe [ 369.884540][T10703] uprobe: syz.0.1911:10703 failed to unregister, leaking uprobe [ 371.024144][ T44] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 371.164179][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 371.164205][ T60] Bluetooth: unknown link type 10 [ 371.164228][ T60] Bluetooth: hci4: connection err: -111 [ 371.194087][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 371.195848][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.195878][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.195898][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.195935][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 371.195957][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.237948][ T44] usb 4-1: config 0 descriptor?? [ 371.869788][T10772] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1935'. [ 371.971842][ T44] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 372.001683][ T44] microsoft 0003:045E:07DA.0001: unknown main item tag 0x2 [ 372.003199][ T44] microsoft 0003:045E:07DA.0001: collection stack underflow [ 372.003227][ T44] microsoft 0003:045E:07DA.0001: item 0 2 0 12 parsing failed [ 372.020882][ T44] microsoft 0003:045E:07DA.0001: parse failed [ 372.020985][ T44] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 372.952846][ T43] usb 4-1: USB disconnect, device number 17 [ 373.484447][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 373.484473][ T60] Bluetooth: unknown link type 10 [ 373.484497][ T60] Bluetooth: hci0: connection err: -111 [ 373.540044][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 373.540069][ T60] Bluetooth: unknown link type 10 [ 373.540092][ T60] Bluetooth: hci1: connection err: -111 [ 374.523421][T10840] netlink: 'syz.1.1964': attribute type 3 has an invalid length. [ 375.061631][T10867] mmap: syz.0.1972 (10867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 375.119904][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 375.119927][ T60] Bluetooth: unknown link type 10 [ 375.119949][ T60] Bluetooth: hci1: connection err: -111 [ 375.501983][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 375.502060][ T60] Bluetooth: hci4: connection err: -111 [ 377.335729][ T5884] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 377.540146][ T5884] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 377.540201][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 377.541633][ T5884] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 377.541659][ T5884] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 377.541678][ T5884] usb 1-1: Manufacturer: syz [ 377.559846][ T5884] usb 1-1: config 0 descriptor?? [ 377.582002][ T5884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 378.011035][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 378.011123][ T60] Bluetooth: unknown link type 10 [ 378.011149][ T60] Bluetooth: hci0: connection err: -111 [ 378.911273][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.127064][T10948] input: syz1 as /devices/virtual/input/input56 [ 379.304255][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 379.304281][ T60] Bluetooth: unknown link type 10 [ 379.304306][ T60] Bluetooth: hci1: connection err: -111 [ 380.078655][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'. [ 380.309479][T10989] ======================================================= [ 380.309479][T10989] WARNING: The mand mount option has been deprecated and [ 380.309479][T10989] and is ignored by this kernel. Remove the mand [ 380.309479][T10989] option from the mount to silence this warning. [ 380.309479][T10989] ======================================================= [ 380.559589][ T43] usb 1-1: USB disconnect, device number 11 [ 380.772238][T11011] FAULT_INJECTION: forcing a failure. [ 380.772238][T11011] name failslab, interval 1, probability 0, space 0, times 1 [ 380.772283][T11011] CPU: 0 UID: 0 PID: 11011 Comm: syz.3.2038 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.772306][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 380.772326][T11011] Call Trace: [ 380.772337][T11011] [ 380.772344][T11011] dump_stack_lvl+0xe8/0x150 [ 380.772378][T11011] should_fail_ex+0x46b/0x600 [ 380.772411][T11011] should_failslab+0xa8/0x100 [ 380.772440][T11011] __kmalloc_noprof+0xdf/0x7b0 [ 380.772467][T11011] ? tomoyo_encode+0x28b/0x550 [ 380.772498][T11011] tomoyo_encode+0x28b/0x550 [ 380.772529][T11011] tomoyo_realpath_from_path+0x58d/0x5d0 [ 380.772574][T11011] ? tomoyo_path_number_perm+0x219/0x630 [ 380.772598][T11011] tomoyo_path_number_perm+0x246/0x630 [ 380.772623][T11011] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 380.772644][T11011] ? __lock_acquire+0x6b5/0x2cf0 [ 380.772668][T11011] ? do_raw_spin_lock+0x12b/0x2f0 [ 380.772725][T11011] ? __fget_files+0x2a/0x420 [ 380.772750][T11011] ? __fget_files+0x2a/0x420 [ 380.772774][T11011] ? __fget_files+0x3a6/0x420 [ 380.772794][T11011] ? __fget_files+0x2a/0x420 [ 380.772819][T11011] security_file_ioctl+0xc3/0x2a0 [ 380.772845][T11011] __se_sys_ioctl+0x47/0x170 [ 380.772871][T11011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.772893][T11011] do_syscall_64+0x15f/0xf80 [ 380.772919][T11011] ? trace_irq_disable+0x3b/0x140 [ 380.772947][T11011] ? clear_bhb_loop+0x40/0x90 [ 380.772970][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.772989][T11011] RIP: 0033:0x7f334eadc819 [ 380.773013][T11011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.773030][T11011] RSP: 002b:00007f334cd36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.773050][T11011] RAX: ffffffffffffffda RBX: 00007f334ed55fa0 RCX: 00007f334eadc819 [ 380.773065][T11011] RDX: 0000200000000280 RSI: 00000000c0145608 RDI: 0000000000000003 [ 380.773078][T11011] RBP: 00007f334cd36090 R08: 0000000000000000 R09: 0000000000000000 [ 380.773090][T11011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.773102][T11011] R13: 00007f334ed56038 R14: 00007f334ed55fa0 R15: 00007fffeb7c3d18 [ 380.773133][T11011] [ 380.796840][T11011] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.044076][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 381.044103][ T60] Bluetooth: unknown link type 10 [ 381.044125][ T60] Bluetooth: hci0: connection err: -111 [ 382.045101][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 382.045127][ T60] Bluetooth: unknown link type 10 [ 382.045152][ T60] Bluetooth: hci0: connection err: -111 [ 382.225518][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 383.055118][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 383.055146][ T60] Bluetooth: unknown link type 10 [ 383.055170][ T60] Bluetooth: hci4: connection err: -111 [ 383.454238][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 383.614254][ T5884] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 383.614284][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.614302][ T5884] usb 2-1: Product: syz [ 383.614316][ T5884] usb 2-1: Manufacturer: syz [ 383.614329][ T5884] usb 2-1: SerialNumber: syz [ 385.511729][ T5884] (unnamed net_device) (uninitialized): Assigned a random MAC address: 96:28:f5:96:70:20 [ 386.170264][ T5884] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 386.212280][ T5884] usb 2-1: USB disconnect, device number 22 [ 386.217886][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 386.217915][ T60] Bluetooth: unknown link type 10 [ 386.217940][ T60] Bluetooth: hci3: connection err: -111 [ 386.454290][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 386.454314][ T60] Bluetooth: unknown link type 10 [ 386.454339][ T60] Bluetooth: hci4: connection err: -111 [ 387.694131][ T5884] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 387.858696][ T5884] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 387.858726][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.858743][ T5884] usb 2-1: Product: syz [ 387.858756][ T5884] usb 2-1: Manufacturer: syz [ 387.858769][ T5884] usb 2-1: SerialNumber: syz [ 387.859264][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 387.859287][ T60] Bluetooth: unknown link type 10 [ 387.859323][ T60] Bluetooth: hci3: connection err: -111 [ 388.594951][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 389.407531][ T5884] rtl8150 2-1:1.0: couldn't reset the device [ 389.407898][ T5884] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 389.447083][ T5884] usb 2-1: USB disconnect, device number 23 [ 389.565736][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 389.572958][ T43] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 389.573012][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 389.573038][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 389.573056][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.573097][ T43] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 389.573119][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.664783][ T43] usb 4-1: config 0 descriptor?? [ 389.710641][ T43] pxrc 4-1:0.0: Could not find endpoint [ 389.712190][ T43] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 389.966129][ T43] usb 4-1: USB disconnect, device number 18 [ 390.290445][T11214] program syz.1.2127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.315350][T11214] capability: warning: `syz.1.2127' uses 32-bit capabilities (legacy support in use) [ 391.202674][T11243] FAULT_INJECTION: forcing a failure. [ 391.202674][T11243] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 391.202708][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.2.2140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 391.202740][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.202752][T11243] Call Trace: [ 391.202760][T11243] [ 391.202768][T11243] dump_stack_lvl+0xe8/0x150 [ 391.202803][T11243] should_fail_ex+0x46b/0x600 [ 391.202835][T11243] strncpy_from_user+0x36/0x2b0 [ 391.202865][T11243] getname_long+0x88/0x130 [ 391.202889][T11243] do_getname+0x181/0x250 [ 391.202909][T11243] __se_sys_linkat+0x3a/0x2d0 [ 391.202927][T11243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.202948][T11243] do_syscall_64+0x15f/0xf80 [ 391.202975][T11243] ? trace_irq_disable+0x3b/0x140 [ 391.203003][T11243] ? clear_bhb_loop+0x40/0x90 [ 391.203031][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.203051][T11243] RIP: 0033:0x7f0766afc819 [ 391.203069][T11243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.203086][T11243] RSP: 002b:00007f0764d4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 391.203107][T11243] RAX: ffffffffffffffda RBX: 00007f0766d75fa0 RCX: 00007f0766afc819 [ 391.203122][T11243] RDX: ffffffffffffffff RSI: 0000200000001000 RDI: ffffffffffffffff [ 391.203136][T11243] RBP: 00007f0764d4e090 R08: 0000000000001400 R09: 0000000000000000 [ 391.203149][T11243] R10: 0000200000002000 R11: 0000000000000246 R12: 0000000000000001 [ 391.203162][T11243] R13: 00007f0766d76038 R14: 00007f0766d75fa0 R15: 00007fff0a2f6778 [ 391.203193][T11243] [ 391.571995][T11249] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2141'. [ 392.015696][T11275] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2150'. [ 392.056172][T11275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.056194][T11275] IPv6: NLM_F_CREATE should be set when creating new route [ 392.253052][T11283] FAULT_INJECTION: forcing a failure. [ 392.253052][T11283] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 392.253087][T11283] CPU: 0 UID: 0 PID: 11283 Comm: syz.2.2158 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.253110][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 392.253122][T11283] Call Trace: [ 392.253133][T11283] [ 392.253142][T11283] dump_stack_lvl+0xe8/0x150 [ 392.253177][T11283] should_fail_ex+0x46b/0x600 [ 392.253211][T11283] prepare_alloc_pages+0x22a/0x6b0 [ 392.253249][T11283] __alloc_frozen_pages_noprof+0x12f/0x380 [ 392.253283][T11283] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.253318][T11283] ? __pfx_policy_nodemask+0x10/0x10 [ 392.253346][T11283] ? __lock_acquire+0x6b5/0x2cf0 [ 392.253373][T11283] alloc_pages_mpol+0xd1/0x380 [ 392.253405][T11283] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 392.253436][T11283] vma_alloc_folio_noprof+0xe1/0x1e0 [ 392.253467][T11283] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 392.253497][T11283] ? __pte_offset_map+0x29/0x200 [ 392.253528][T11283] do_pte_missing+0x822/0x2950 [ 392.253562][T11283] handle_mm_fault+0xd0a/0x13c0 [ 392.253594][T11283] ? handle_mm_fault+0xe7/0x13c0 [ 392.253630][T11283] ? __pfx_handle_mm_fault+0x10/0x10 [ 392.253657][T11283] ? follow_page_pte+0xbc8/0xe40 [ 392.253693][T11283] ? __pfx_follow_page_pte+0x10/0x10 [ 392.253730][T11283] __get_user_pages+0x168f/0x2570 [ 392.253784][T11283] __gup_longterm_locked+0x3db/0x1630 [ 392.253833][T11283] gup_fast_fallback+0x1cf3/0x2040 [ 392.253888][T11283] ? __pfx_gup_fast_fallback+0x10/0x10 [ 392.253916][T11283] ? __kvmalloc_node_noprof+0x3df/0x8e0 [ 392.253943][T11283] ? is_valid_gup_args+0x11f/0x200 [ 392.253970][T11283] ? pin_user_pages_fast+0x4d/0xb0 [ 392.254001][T11283] io_pin_pages+0xba/0x1b0 [ 392.254020][T11283] io_region_pin_pages+0x7d/0x190 [ 392.254043][T11283] io_create_region+0x38c/0x4a0 [ 392.254072][T11283] io_allocate_scq_urings+0x220/0x820 [ 392.254102][T11283] ? __pfx_io_allocate_scq_urings+0x10/0x10 [ 392.254122][T11283] ? cap_capable+0x123/0x460 [ 392.254149][T11283] ? bpf_lsm_capable+0x9/0x20 [ 392.254168][T11283] ? security_capable+0x7e/0x2c0 [ 392.254200][T11283] io_uring_create+0x47d/0x9a0 [ 392.254223][T11283] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 392.254248][T11283] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 392.254272][T11283] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 392.254310][T11283] ? __pfx_ksys_write+0x10/0x10 [ 392.254345][T11283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.254366][T11283] do_syscall_64+0x15f/0xf80 [ 392.254392][T11283] ? trace_irq_disable+0x3b/0x140 [ 392.254421][T11283] ? clear_bhb_loop+0x40/0x90 [ 392.254445][T11283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.254465][T11283] RIP: 0033:0x7f0766afc819 [ 392.254482][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.254499][T11283] RSP: 002b:00007f0764d4e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 392.254520][T11283] RAX: ffffffffffffffda RBX: 00007f0766d75fa0 RCX: 00007f0766afc819 [ 392.254535][T11283] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000524 [ 392.254547][T11283] RBP: 00007f0764d4e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.254559][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.254571][T11283] R13: 00007f0766d76038 R14: 00007f0766d75fa0 R15: 00007fff0a2f6778 [ 392.254602][T11283] [ 392.357955][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 392.357982][ T60] Bluetooth: unknown link type 10 [ 392.358006][ T60] Bluetooth: hci4: connection err: -111 [ 394.581139][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 394.581167][ T60] Bluetooth: unknown link type 10 [ 394.581193][ T60] Bluetooth: hci3: connection err: -111 [ 395.271171][ T36] audit: type=1326 audit(1776420771.833:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11341 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334eadc819 code=0x7fc00000 [ 396.094767][T11336] kthread_run failed with err -4 [ 396.284130][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 396.303734][ T36] audit: type=1326 audit(1776420772.863:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11341 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f334eadc819 code=0x7fc00000 [ 396.434199][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 396.436681][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 396.438326][ T5884] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 396.438351][ T5884] usb 5-1: config 8 has no interface number 0 [ 396.438383][ T5884] usb 5-1: config 8 interface 109 has no altsetting 0 [ 396.442952][ T5884] usb 5-1: New USB device found, idVendor=03f0, idProduct=2016, bcdDevice=93.1c [ 396.442979][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.442999][ T5884] usb 5-1: Product: syz [ 396.443014][ T5884] usb 5-1: Manufacturer: syz [ 396.443027][ T5884] usb 5-1: SerialNumber: syz [ 396.821180][ T5884] usb 5-1: USB disconnect, device number 9 [ 399.256384][ T815] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 399.273926][T11462] FAULT_INJECTION: forcing a failure. [ 399.273926][T11462] name failslab, interval 1, probability 0, space 0, times 0 [ 399.273958][T11462] CPU: 1 UID: 0 PID: 11462 Comm: syz.1.2236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.273984][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.273994][T11462] Call Trace: [ 399.274000][T11462] [ 399.274007][T11462] dump_stack_lvl+0xe8/0x150 [ 399.274039][T11462] should_fail_ex+0x46b/0x600 [ 399.274068][T11462] should_failslab+0xa8/0x100 [ 399.274096][T11462] __kmalloc_noprof+0xdf/0x7b0 [ 399.274119][T11462] ? kfree+0x4d/0x6c0 [ 399.274140][T11462] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 399.274173][T11462] tomoyo_realpath_from_path+0xe3/0x5d0 [ 399.274200][T11462] ? tomoyo_domain+0xd8/0x130 [ 399.274232][T11462] ? tomoyo_path_number_perm+0x219/0x630 [ 399.274254][T11462] tomoyo_path_number_perm+0x246/0x630 [ 399.274279][T11462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 399.274300][T11462] ? __lock_acquire+0x6b5/0x2cf0 [ 399.274324][T11462] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.274378][T11462] ? __fget_files+0x2a/0x420 [ 399.274402][T11462] ? __fget_files+0x2a/0x420 [ 399.274422][T11462] ? __fget_files+0x3a6/0x420 [ 399.274441][T11462] ? __fget_files+0x2a/0x420 [ 399.274466][T11462] security_file_ioctl+0xc3/0x2a0 [ 399.274491][T11462] __se_sys_ioctl+0x47/0x170 [ 399.274518][T11462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.274538][T11462] do_syscall_64+0x15f/0xf80 [ 399.274564][T11462] ? trace_irq_disable+0x3b/0x140 [ 399.274592][T11462] ? clear_bhb_loop+0x40/0x90 [ 399.274616][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.274635][T11462] RIP: 0033:0x7f221ca0c819 [ 399.274652][T11462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.274739][T11462] RSP: 002b:00007f221ac5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.274759][T11462] RAX: ffffffffffffffda RBX: 00007f221cc85fa0 RCX: 00007f221ca0c819 [ 399.274773][T11462] RDX: 0000200000000100 RSI: 0000000040bc5311 RDI: 0000000000000003 [ 399.274786][T11462] RBP: 00007f221ac5e090 R08: 0000000000000000 R09: 0000000000000000 [ 399.274798][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.274810][T11462] R13: 00007f221cc86038 R14: 00007f221cc85fa0 R15: 00007ffd71cbc918 [ 399.274840][T11462] [ 399.289225][T11462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.527536][ T815] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 399.527566][ T815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.527586][ T815] usb 4-1: Product: syz [ 399.527600][ T815] usb 4-1: Manufacturer: syz [ 399.527614][ T815] usb 4-1: SerialNumber: syz [ 400.364082][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 400.815359][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 400.815404][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 400.816880][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 400.816906][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 400.816939][ T31] usb 2-1: Manufacturer: syz [ 400.828536][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 400.828569][ T60] Bluetooth: unknown link type 10 [ 400.828593][ T60] Bluetooth: hci4: connection err: -111 [ 400.924387][ T31] usb 2-1: config 0 descriptor?? [ 401.548007][ T815] rtl8150 4-1:1.0: couldn't reset the device [ 401.548345][ T815] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 401.708348][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 402.326238][ T815] usb 4-1: USB disconnect, device number 19 [ 402.470654][T11518] input: syz1 as /devices/virtual/input/input57 [ 402.921566][T11524] exFAT-fs (nbd4): unable to read boot sector [ 402.921583][T11524] exFAT-fs (nbd4): failed to read boot sector [ 402.921592][T11524] exFAT-fs (nbd4): failed to recognize exfat type [ 404.898262][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 404.910164][ T60] Bluetooth: hci1: unexpected event 0x04 length: 13 > 10 [ 404.910192][ T60] Bluetooth: unknown link type 10 [ 404.910215][ T60] Bluetooth: hci1: connection err: -111 [ 405.175242][ T31] usb 1-1: device descriptor read/64, error -71 [ 405.789941][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 406.254781][ T31] usb 1-1: device descriptor read/64, error -71 [ 406.378039][ T31] usb usb1-port1: attempt power cycle [ 406.844214][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 406.920701][ T31] usb 1-1: device descriptor read/8, error -71 [ 407.174162][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 407.194422][ T31] usb 1-1: device descriptor read/8, error -71 [ 407.306129][ T31] usb usb1-port1: unable to enumerate USB device [ 407.520026][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 407.520049][ T60] Bluetooth: unknown link type 10 [ 407.520072][ T60] Bluetooth: hci3: connection err: -111 [ 408.804194][ T31] usb 2-1: USB disconnect, device number 24 [ 411.186742][T11602] input: syz1 as /devices/virtual/input/input58 [ 411.422678][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 411.422725][ T60] Bluetooth: hci0: connection err: -111 [ 415.466357][ T60] Bluetooth: hci0: unexpected event 0x04 length: 13 > 10 [ 415.466398][ T60] Bluetooth: hci0: connection err: -111 [ 415.902749][T11656] FAULT_INJECTION: forcing a failure. [ 415.902749][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 415.902783][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.3.2306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.902805][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.902817][T11656] Call Trace: [ 415.902824][T11656] [ 415.902833][T11656] dump_stack_lvl+0xe8/0x150 [ 415.902868][T11656] should_fail_ex+0x46b/0x600 [ 415.902900][T11656] should_failslab+0xa8/0x100 [ 415.902929][T11656] __kmalloc_noprof+0xdf/0x7b0 [ 415.902954][T11656] ? kfree+0x4d/0x6c0 [ 415.902975][T11656] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 415.903015][T11656] tomoyo_realpath_from_path+0xe3/0x5d0 [ 415.903043][T11656] ? tomoyo_domain+0xd8/0x130 [ 415.903074][T11656] ? tomoyo_path_number_perm+0x219/0x630 [ 415.903097][T11656] tomoyo_path_number_perm+0x246/0x630 [ 415.903122][T11656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.903143][T11656] ? __lock_acquire+0x6b5/0x2cf0 [ 415.903167][T11656] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.903229][T11656] ? __fget_files+0x2a/0x420 [ 415.903253][T11656] ? __fget_files+0x2a/0x420 [ 415.903273][T11656] ? __fget_files+0x3a6/0x420 [ 415.903292][T11656] ? __fget_files+0x2a/0x420 [ 415.903317][T11656] security_file_ioctl+0xc3/0x2a0 [ 415.903342][T11656] __se_sys_ioctl+0x47/0x170 [ 415.903368][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.903390][T11656] do_syscall_64+0x15f/0xf80 [ 415.903416][T11656] ? trace_irq_disable+0x3b/0x140 [ 415.903443][T11656] ? clear_bhb_loop+0x40/0x90 [ 415.903467][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.903486][T11656] RIP: 0033:0x7f334eadc819 [ 415.903504][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.903521][T11656] RSP: 002b:00007f334cd15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.903541][T11656] RAX: ffffffffffffffda RBX: 00007f334ed56090 RCX: 00007f334eadc819 [ 415.903555][T11656] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003 [ 415.903567][T11656] RBP: 00007f334cd15090 R08: 0000000000000000 R09: 0000000000000000 [ 415.903579][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.903591][T11656] R13: 00007f334ed56128 R14: 00007f334ed56090 R15: 00007fffeb7c3d18 [ 415.903621][T11656] [ 416.056410][T11656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.627650][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 416.627676][ T60] Bluetooth: unknown link type 10 [ 416.627698][ T60] Bluetooth: hci3: connection err: -111 [ 417.146232][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 417.146259][ T60] Bluetooth: unknown link type 10 [ 417.146283][ T60] Bluetooth: hci4: connection err: -111 [ 417.256658][T11671] FAULT_INJECTION: forcing a failure. [ 417.256658][T11671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.256687][T11671] CPU: 1 UID: 0 PID: 11671 Comm: syz.3.2311 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.256704][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.256713][T11671] Call Trace: [ 417.256719][T11671] [ 417.256725][T11671] dump_stack_lvl+0xe8/0x150 [ 417.256753][T11671] should_fail_ex+0x46b/0x600 [ 417.256778][T11671] _copy_to_user+0x31/0xb0 [ 417.256795][T11671] simple_read_from_buffer+0xe1/0x170 [ 417.256816][T11671] proc_fail_nth_read+0x1be/0x230 [ 417.256836][T11671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.256855][T11671] ? rw_verify_area+0x2ac/0x4e0 [ 417.256892][T11671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.256912][T11671] vfs_read+0x212/0xa80 [ 417.256936][T11671] ? __pfx_vfs_read+0x10/0x10 [ 417.256955][T11671] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 417.256975][T11671] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.256995][T11671] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 417.257014][T11671] ? mutex_lock_nested+0x152/0x1d0 [ 417.257029][T11671] ? fdget_pos+0x252/0x320 [ 417.257052][T11671] ksys_read+0x156/0x270 [ 417.257074][T11671] ? __pfx_ksys_read+0x10/0x10 [ 417.257099][T11671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.257117][T11671] do_syscall_64+0x15f/0xf80 [ 417.257205][T11671] ? trace_irq_disable+0x3b/0x140 [ 417.257226][T11671] ? clear_bhb_loop+0x40/0x90 [ 417.257247][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.257265][T11671] RIP: 0033:0x7f334ea9d04e [ 417.257280][T11671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.257294][T11671] RSP: 002b:00007f334ccf3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.257313][T11671] RAX: ffffffffffffffda RBX: 00007f334ccf46c0 RCX: 00007f334ea9d04e [ 417.257325][T11671] RDX: 000000000000000f RSI: 00007f334ccf40a0 RDI: 0000000000000005 [ 417.257335][T11671] RBP: 00007f334ccf4090 R08: 0000000000000000 R09: 0000000000000000 [ 417.257345][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.257354][T11671] R13: 00007f334ed56218 R14: 00007f334ed56180 R15: 00007fffeb7c3d18 [ 417.257380][T11671] [ 418.948197][T11687] input: syz1 as /devices/virtual/input/input59 [ 420.479111][ T815] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 420.876187][ T815] usb 4-1: Using ep0 maxpacket: 16 [ 420.878525][ T815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.878551][ T815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.881990][ T815] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.882017][ T815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.882035][ T815] usb 4-1: Product: syz [ 420.882049][ T815] usb 4-1: Manufacturer: syz [ 420.882063][ T815] usb 4-1: SerialNumber: syz [ 421.156919][ T815] usb 4-1: 0:2 : does not exist [ 421.234811][ T815] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 422.157558][T11716] FAULT_INJECTION: forcing a failure. [ 422.157558][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.157591][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.0.2331 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 422.157610][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 422.157621][T11716] Call Trace: [ 422.157628][T11716] [ 422.157636][T11716] dump_stack_lvl+0xe8/0x150 [ 422.157667][T11716] should_fail_ex+0x46b/0x600 [ 422.157705][T11716] _copy_from_user+0x2d/0xb0 [ 422.157722][T11716] do_sock_getsockopt+0x200/0x7e0 [ 422.157748][T11716] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 422.157782][T11716] ? __fget_files+0x3a6/0x420 [ 422.157801][T11716] ? __fget_files+0x2a/0x420 [ 422.157826][T11716] __x64_sys_getsockopt+0x1aa/0x250 [ 422.157854][T11716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.157874][T11716] do_syscall_64+0x15f/0xf80 [ 422.157901][T11716] ? trace_irq_disable+0x3b/0x140 [ 422.157928][T11716] ? clear_bhb_loop+0x40/0x90 [ 422.157951][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.157970][T11716] RIP: 0033:0x7f2efdc5c819 [ 422.157988][T11716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.158009][T11716] RSP: 002b:00007f2efbeb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 422.158041][T11716] RAX: ffffffffffffffda RBX: 00007f2efded5fa0 RCX: 00007f2efdc5c819 [ 422.158056][T11716] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000003 [ 422.158067][T11716] RBP: 00007f2efbeb6090 R08: 0000200000000040 R09: 0000000000000000 [ 422.158079][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.158089][T11716] R13: 00007f2efded6038 R14: 00007f2efded5fa0 R15: 00007fff9b210be8 [ 422.158116][T11716] [ 422.360957][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 422.360981][ T60] Bluetooth: unknown link type 10 [ 422.361005][ T60] Bluetooth: hci4: connection err: -111 [ 422.583475][ T815] usb 4-1: USB disconnect, device number 20 [ 424.615248][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 424.615276][ T60] Bluetooth: unknown link type 10 [ 424.615299][ T60] Bluetooth: hci3: connection err: -111 [ 424.650473][ T5802] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 424.867470][ T8466] udevd[8466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.925413][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 424.946929][ T5802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.946955][ T5802] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.970553][ T5802] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.970581][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.970599][ T5802] usb 2-1: Product: syz [ 424.970612][ T5802] usb 2-1: Manufacturer: syz [ 424.970625][ T5802] usb 2-1: SerialNumber: syz [ 425.830477][ T5802] usb 2-1: 0:2 : does not exist [ 425.837179][ T5802] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 426.158503][ T5802] usb 2-1: USB disconnect, device number 25 [ 426.373348][T11760] FAULT_INJECTION: forcing a failure. [ 426.373348][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.373387][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.2.2346 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.373409][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 426.373425][T11760] Call Trace: [ 426.373432][T11760] [ 426.373440][T11760] dump_stack_lvl+0xe8/0x150 [ 426.373474][T11760] should_fail_ex+0x46b/0x600 [ 426.373506][T11760] _copy_from_user+0x2d/0xb0 [ 426.373527][T11760] ___sys_sendmsg+0x1c6/0x360 [ 426.373551][T11760] ? __lock_acquire+0x6b5/0x2cf0 [ 426.373576][T11760] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.373631][T11760] ? __fget_files+0x2a/0x420 [ 426.373652][T11760] ? __fget_files+0x3a6/0x420 [ 426.373682][T11760] __x64_sys_sendmsg+0x1c3/0x2a0 [ 426.373708][T11760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.373740][T11760] ? __pfx_ksys_write+0x10/0x10 [ 426.373773][T11760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.373795][T11760] do_syscall_64+0x15f/0xf80 [ 426.373820][T11760] ? trace_irq_disable+0x3b/0x140 [ 426.373848][T11760] ? clear_bhb_loop+0x40/0x90 [ 426.373872][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.373895][T11760] RIP: 0033:0x7f0766afc819 [ 426.373914][T11760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.373931][T11760] RSP: 002b:00007f0764d2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.373951][T11760] RAX: ffffffffffffffda RBX: 00007f0766d76090 RCX: 00007f0766afc819 [ 426.373965][T11760] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 426.373981][T11760] RBP: 00007f0764d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 426.373991][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.374000][T11760] R13: 00007f0766d76128 R14: 00007f0766d76090 R15: 00007fff0a2f6778 [ 426.374036][T11760] [ 427.055147][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2344'. [ 427.692571][ T8466] udevd[8466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.894858][ T5802] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 430.064183][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 430.066658][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.066689][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.066711][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 430.066765][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.066787][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.140733][ T5802] usb 2-1: config 0 descriptor?? [ 430.310800][T11789] FAULT_INJECTION: forcing a failure. [ 430.310800][T11789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.310839][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.0.2358 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.310888][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.310911][T11789] Call Trace: [ 430.310919][T11789] [ 430.310927][T11789] dump_stack_lvl+0xe8/0x150 [ 430.310961][T11789] should_fail_ex+0x46b/0x600 [ 430.310993][T11789] _copy_from_user+0x2d/0xb0 [ 430.311014][T11789] ___sys_sendmsg+0x1c6/0x360 [ 430.311037][T11789] ? __lock_acquire+0x6b5/0x2cf0 [ 430.311062][T11789] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.311115][T11789] ? __fget_files+0x2a/0x420 [ 430.311137][T11789] ? __fget_files+0x3a6/0x420 [ 430.311166][T11789] __x64_sys_sendmsg+0x1c3/0x2a0 [ 430.311193][T11789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.311225][T11789] ? __pfx_ksys_write+0x10/0x10 [ 430.311257][T11789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.311278][T11789] do_syscall_64+0x15f/0xf80 [ 430.311304][T11789] ? trace_irq_disable+0x3b/0x140 [ 430.311332][T11789] ? clear_bhb_loop+0x40/0x90 [ 430.311355][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.311374][T11789] RIP: 0033:0x7f2efdc5c819 [ 430.311391][T11789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.311408][T11789] RSP: 002b:00007f2efbeb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.311428][T11789] RAX: ffffffffffffffda RBX: 00007f2efded5fa0 RCX: 00007f2efdc5c819 [ 430.311442][T11789] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 430.311454][T11789] RBP: 00007f2efbeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.311467][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.311479][T11789] R13: 00007f2efded6038 R14: 00007f2efded5fa0 R15: 00007fff9b210be8 [ 430.311509][T11789] [ 432.624107][ T5862] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 433.135507][ T5862] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 433.135539][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.135558][ T5862] usb 4-1: Product: syz [ 433.135572][ T5862] usb 4-1: Manufacturer: syz [ 433.135586][ T5862] usb 4-1: SerialNumber: syz [ 434.839614][ T5862] rtl8150 4-1:1.0: couldn't reset the device [ 434.839999][ T5862] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 435.618487][ T5802] usbhid 2-1:0.0: can't add hid device: -32 [ 435.618597][ T5802] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 436.620090][ T5884] usb 4-1: USB disconnect, device number 21 [ 438.719614][ T5884] usb 2-1: USB disconnect, device number 26 [ 439.188476][ T60] Bluetooth: hci4: unexpected event 0x04 length: 13 > 10 [ 439.188516][ T60] Bluetooth: unknown link type 10 [ 439.188541][ T60] Bluetooth: hci4: connection err: -111 [ 440.368809][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.846545][ T5802] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 443.954187][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 444.104202][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 444.111668][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.111697][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.111716][ T5802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.111751][ T5802] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.111771][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.141457][T11891] FAULT_INJECTION: forcing a failure. [ 444.141457][T11891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.141490][T11891] CPU: 1 UID: 0 PID: 11891 Comm: syz.2.2396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.141512][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 444.141523][T11891] Call Trace: [ 444.141531][T11891] [ 444.141538][T11891] dump_stack_lvl+0xe8/0x150 [ 444.141571][T11891] should_fail_ex+0x46b/0x600 [ 444.141602][T11891] _copy_to_user+0x31/0xb0 [ 444.141624][T11891] simple_read_from_buffer+0xe1/0x170 [ 444.141650][T11891] proc_fail_nth_read+0x1be/0x230 [ 444.141673][T11891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.141698][T11891] ? rw_verify_area+0x2ac/0x4e0 [ 444.141722][T11891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.141744][T11891] vfs_read+0x212/0xa80 [ 444.141774][T11891] ? __pfx_vfs_read+0x10/0x10 [ 444.141800][T11891] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 444.141828][T11891] ? lockdep_hardirqs_on+0x7a/0x110 [ 444.141852][T11891] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 444.141877][T11891] ? mutex_lock_nested+0x152/0x1d0 [ 444.141896][T11891] ? fdget_pos+0x252/0x320 [ 444.141924][T11891] ksys_read+0x156/0x270 [ 444.141950][T11891] ? __pfx_ksys_read+0x10/0x10 [ 444.141980][T11891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.142000][T11891] do_syscall_64+0x15f/0xf80 [ 444.142024][T11891] ? trace_irq_disable+0x3b/0x140 [ 444.142051][T11891] ? clear_bhb_loop+0x40/0x90 [ 444.142073][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.142091][T11891] RIP: 0033:0x7f0766abd04e [ 444.142109][T11891] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.142126][T11891] RSP: 002b:00007f0764d2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.142146][T11891] RAX: ffffffffffffffda RBX: 00007f0764d2d6c0 RCX: 00007f0766abd04e [ 444.142159][T11891] RDX: 000000000000000f RSI: 00007f0764d2d0a0 RDI: 0000000000000005 [ 444.142171][T11891] RBP: 00007f0764d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 444.142190][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.142201][T11891] R13: 00007f0766d76128 R14: 00007f0766d76090 R15: 00007fff0a2f6778 [ 444.142231][T11891] [ 444.153681][ T43] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 444.153709][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.153727][ T43] usb 1-1: Product: syz [ 444.153740][ T43] usb 1-1: Manufacturer: syz [ 444.153753][ T43] usb 1-1: SerialNumber: syz [ 444.405942][ T5802] usb 4-1: config 0 descriptor?? [ 447.421006][ T43] rtl8150 1-1:1.0: couldn't reset the device [ 447.421350][ T43] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 447.443145][ T5802] usbhid 4-1:0.0: can't add hid device: -71 [ 447.443278][ T5802] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 447.541839][ T5802] usb 4-1: USB disconnect, device number 22 [ 447.563258][ T43] usb 1-1: USB disconnect, device number 16 [ 448.200417][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 448.247609][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 448.249810][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 448.265389][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 448.266077][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 448.811256][ T60] Bluetooth: hci3: unexpected event 0x04 length: 13 > 10 [ 448.811282][ T60] Bluetooth: unknown link type 10 [ 448.811307][ T60] Bluetooth: hci3: connection err: -111 [ 450.414152][ T60] Bluetooth: hci5: command tx timeout [ 452.494140][ T60] Bluetooth: hci5: command tx timeout [ 453.992346][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 454.002944][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 454.591390][ T60] Bluetooth: hci5: command tx timeout [ 456.082597][T11893] chnl_net:caif_netlink_parms(): no params data found [ 456.880842][ T60] Bluetooth: hci5: command tx timeout [ 458.130154][T11893] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.130287][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.130513][T11893] bridge_slave_0: entered allmulticast mode [ 458.171866][T11893] bridge_slave_0: entered promiscuous mode [ 458.258545][T11893] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.265601][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.267743][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.286908][T11893] bridge_slave_1: entered allmulticast mode [ 458.289331][T11893] bridge_slave_1: entered promiscuous mode [ 458.375119][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.376572][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.378913][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.386217][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.070919][T11893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.108958][T11893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.068294][T11933] FAULT_INJECTION: forcing a failure. [ 460.068294][T11933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.068328][T11933] CPU: 0 UID: 0 PID: 11933 Comm: syz.0.2407 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 460.068351][T11933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 460.068363][T11933] Call Trace: [ 460.068371][T11933] [ 460.068380][T11933] dump_stack_lvl+0xe8/0x150 [ 460.068415][T11933] should_fail_ex+0x46b/0x600 [ 460.068447][T11933] _copy_to_user+0x31/0xb0 [ 460.068470][T11933] simple_read_from_buffer+0xe1/0x170 [ 460.068497][T11933] proc_fail_nth_read+0x1be/0x230 [ 460.068523][T11933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.068548][T11933] ? rw_verify_area+0x2ac/0x4e0 [ 460.068572][T11933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.068604][T11933] vfs_read+0x212/0xa80 [ 460.068637][T11933] ? __pfx_vfs_read+0x10/0x10 [ 460.068663][T11933] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 460.068691][T11933] ? lockdep_hardirqs_on+0x7a/0x110 [ 460.068717][T11933] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 460.068744][T11933] ? mutex_lock_nested+0x152/0x1d0 [ 460.068764][T11933] ? fdget_pos+0x252/0x320 [ 460.068794][T11933] ksys_read+0x156/0x270 [ 460.068821][T11933] ? __pfx_ksys_read+0x10/0x10 [ 460.068853][T11933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.068874][T11933] do_syscall_64+0x15f/0xf80 [ 460.068899][T11933] ? trace_irq_disable+0x3b/0x140 [ 460.068927][T11933] ? clear_bhb_loop+0x40/0x90 [ 460.068950][T11933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.068969][T11933] RIP: 0033:0x7f2efdc1d04e [ 460.068987][T11933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.069004][T11933] RSP: 002b:00007f2efbeb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.069026][T11933] RAX: ffffffffffffffda RBX: 00007f2efbeb66c0 RCX: 00007f2efdc1d04e [ 460.069040][T11933] RDX: 000000000000000f RSI: 00007f2efbeb60a0 RDI: 0000000000000005 [ 460.069053][T11933] RBP: 00007f2efbeb6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.069065][T11933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.069076][T11933] R13: 00007f2efded6038 R14: 00007f2efded5fa0 R15: 00007fff9b210be8 [ 460.069106][T11933] [ 460.087858][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 460.494410][ T5809] Bluetooth: hci0: command tx timeout [ 460.535140][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 460.575819][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 460.690679][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 460.692719][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.667454][T11893] team0: Port device team_slave_0 added [ 462.152922][T11893] team0: Port device team_slave_1 added [ 462.178597][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 462.252148][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 462.278668][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 462.291665][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 462.294505][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.574169][ T5809] Bluetooth: hci0: command tx timeout [ 462.815736][ T5809] Bluetooth: hci6: command tx timeout [ 464.664096][ T5809] Bluetooth: hci0: command tx timeout [ 464.894959][ T5809] Bluetooth: hci6: command tx timeout [ 464.979144][ T5809] Bluetooth: hci7: command tx timeout [ 466.734126][ T5809] Bluetooth: hci0: command tx timeout [ 467.062153][ T5809] Bluetooth: hci6: command tx timeout [ 467.062190][ T5809] Bluetooth: hci7: command tx timeout [ 467.119981][T11893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.119999][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.120026][T11893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.738668][T11893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.738685][T11893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.738712][T11893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.134137][ T60] Bluetooth: hci7: command tx timeout [ 469.134169][ T60] Bluetooth: hci6: command tx timeout [ 469.582663][T11893] hsr_slave_0: entered promiscuous mode [ 469.590645][T11893] hsr_slave_1: entered promiscuous mode [ 469.591698][T11893] debugfs: 'hsr0' already exists in 'hsr' [ 469.591722][T11893] Cannot create hsr debugfs directory [ 471.214196][ T60] Bluetooth: hci7: command tx timeout [ 475.979443][T11921] chnl_net:caif_netlink_parms(): no params data found [ 476.403638][T11931] chnl_net:caif_netlink_parms(): no params data found [ 476.781329][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.842451][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.844371][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.864259][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.873673][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.054299][ T60] Bluetooth: hci1: command tx timeout [ 481.134279][ T60] Bluetooth: hci1: command tx timeout [ 483.212186][T11937] chnl_net:caif_netlink_parms(): no params data found [ 483.234080][ T60] Bluetooth: hci1: command tx timeout [ 485.294123][ T60] Bluetooth: hci1: command tx timeout [ 485.891366][T11921] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.964169][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.964446][T11921] bridge_slave_0: entered allmulticast mode [ 485.967282][T11921] bridge_slave_0: entered promiscuous mode [ 486.243925][T11931] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.244190][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.244437][T11931] bridge_slave_0: entered allmulticast mode [ 486.287602][T11931] bridge_slave_0: entered promiscuous mode [ 486.343255][T11921] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.343372][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.343571][T11921] bridge_slave_1: entered allmulticast mode [ 486.353102][T11921] bridge_slave_1: entered promiscuous mode [ 487.042538][T11931] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.042650][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.042886][T11931] bridge_slave_1: entered allmulticast mode [ 487.193504][T11931] bridge_slave_1: entered promiscuous mode [ 488.339024][T11893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 488.432923][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.887511][ T39] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.343955][T11921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.646528][T11893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 491.989947][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.835201][T11931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.843125][T11921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.843378][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.843526][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.843700][T11937] bridge_slave_0: entered allmulticast mode [ 492.878731][T11937] bridge_slave_0: entered promiscuous mode [ 493.009877][T11893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.166896][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.328299][T11931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.442817][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.488433][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.488702][T11937] bridge_slave_1: entered allmulticast mode [ 493.493716][T11937] bridge_slave_1: entered promiscuous mode [ 493.687931][T11893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.069917][T11893] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.025291][T11921] team0: Port device team_slave_0 added [ 495.152490][T11931] team0: Port device team_slave_0 added [ 495.168295][T11921] team0: Port device team_slave_1 added [ 495.194736][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.251871][T11931] team0: Port device team_slave_1 added [ 495.487639][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.254735][T11921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.254747][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.254762][T11921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.429116][T11931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.429134][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.429161][T11931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.545711][T11921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.545728][T11921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.545754][T11921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.558432][T11937] team0: Port device team_slave_0 added [ 496.567016][T11931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.567031][T11931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.567057][T11931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.616526][T11937] team0: Port device team_slave_1 added [ 498.027297][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.027314][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.027339][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.105442][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.105459][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.105486][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.017460][T11921] hsr_slave_0: entered promiscuous mode [ 499.022764][T11921] hsr_slave_1: entered promiscuous mode [ 499.030318][T11921] debugfs: 'hsr0' already exists in 'hsr' [ 499.030344][T11921] Cannot create hsr debugfs directory [ 499.128384][T11931] hsr_slave_0: entered promiscuous mode [ 499.134563][T11931] hsr_slave_1: entered promiscuous mode [ 499.140664][T11931] debugfs: 'hsr0' already exists in 'hsr' [ 499.140689][T11931] Cannot create hsr debugfs directory [ 499.909820][T11937] hsr_slave_0: entered promiscuous mode [ 499.972035][T11937] hsr_slave_1: entered promiscuous mode [ 499.973021][T11937] debugfs: 'hsr0' already exists in 'hsr' [ 499.973045][T11937] Cannot create hsr debugfs directory [ 500.135366][T11950] chnl_net:caif_netlink_parms(): no params data found [ 501.462901][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.649176][T11950] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.649343][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.649586][T11950] bridge_slave_0: entered allmulticast mode [ 504.736900][T11950] bridge_slave_0: entered promiscuous mode [ 505.266625][T11950] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.266745][T11950] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.266975][T11950] bridge_slave_1: entered allmulticast mode [ 505.296945][T11950] bridge_slave_1: entered promiscuous mode [ 505.367236][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.893368][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.902078][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.903170][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.915589][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.655444][T11950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.771805][T11950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.899038][T11950] team0: Port device team_slave_0 added [ 508.017007][ T60] Bluetooth: hci2: command tx timeout [ 510.099354][ T60] Bluetooth: hci2: command tx timeout [ 510.188413][T11950] team0: Port device team_slave_1 added [ 510.926066][T11950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.926084][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.926110][T11950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.362916][T11950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.362933][T11950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.362960][T11950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.082991][T11950] hsr_slave_0: entered promiscuous mode [ 512.096986][T11950] hsr_slave_1: entered promiscuous mode [ 512.118681][T11950] debugfs: 'hsr0' already exists in 'hsr' [ 512.118711][T11950] Cannot create hsr debugfs directory [ 512.118987][T11921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.174171][ T60] Bluetooth: hci2: command tx timeout [ 512.241184][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.452607][T11921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.888088][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.001473][T11921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.153342][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.256398][T11921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 513.386776][T11921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.294284][ T60] Bluetooth: hci2: command tx timeout [ 518.477212][T11931] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 519.037958][T11931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 520.348467][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 520.570703][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 520.595906][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 520.600994][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 520.603502][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.233665][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.322790][T12008] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 522.361974][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.363505][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.389994][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.391361][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.469944][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 522.481878][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.507623][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 522.521159][T12008] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 522.734168][ T5119] Bluetooth: hci3: command tx timeout [ 524.664177][ T5119] Bluetooth: hci4: command tx timeout [ 524.734153][ T5119] Bluetooth: hci5: command tx timeout [ 524.824236][ T5119] Bluetooth: hci3: command tx timeout [ 526.798639][ T5119] Bluetooth: hci4: command tx timeout [ 526.814268][ T5119] Bluetooth: hci5: command tx timeout [ 526.816426][T11983] chnl_net:caif_netlink_parms(): no params data found [ 526.894361][ T5119] Bluetooth: hci3: command tx timeout [ 528.814348][ T5119] Bluetooth: hci4: command tx timeout [ 528.896706][ T5119] Bluetooth: hci5: command tx timeout [ 528.984751][ T5119] Bluetooth: hci3: command tx timeout [ 530.911664][ T5119] Bluetooth: hci4: command tx timeout [ 530.985059][ T5119] Bluetooth: hci5: command tx timeout [ 532.316736][T11983] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.316855][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.317090][T11983] bridge_slave_0: entered allmulticast mode [ 532.348482][T11983] bridge_slave_0: entered promiscuous mode [ 534.129413][ T39] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.590848][T11983] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.590969][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.591228][T11983] bridge_slave_1: entered allmulticast mode [ 534.609845][T11983] bridge_slave_1: entered promiscuous mode [ 538.586438][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.718075][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.723443][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.728703][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.738608][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.999694][T11983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.195225][T11983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.686707][T11983] team0: Port device team_slave_0 added [ 540.895062][ T5119] Bluetooth: hci0: command tx timeout [ 541.157865][T11983] team0: Port device team_slave_1 added [ 542.974205][ T5119] Bluetooth: hci0: command tx timeout [ 544.699971][T11983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.699989][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.700015][T11983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.913381][T11983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.913399][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.913425][T11983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.054445][ T5119] Bluetooth: hci0: command tx timeout [ 546.600280][T12002] chnl_net:caif_netlink_parms(): no params data found [ 547.134175][ T5119] Bluetooth: hci0: command tx timeout [ 547.471743][T11983] hsr_slave_0: entered promiscuous mode [ 547.483526][T11983] hsr_slave_1: entered promiscuous mode [ 547.493885][T11983] debugfs: 'hsr0' already exists in 'hsr' [ 547.493915][T11983] Cannot create hsr debugfs directory [ 547.584788][T12005] chnl_net:caif_netlink_parms(): no params data found [ 547.867587][T12006] chnl_net:caif_netlink_parms(): no params data found [ 553.274606][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.274791][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.275035][T12002] bridge_slave_0: entered allmulticast mode [ 553.283677][T12002] bridge_slave_0: entered promiscuous mode [ 553.731976][T12005] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.732098][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.732340][T12005] bridge_slave_0: entered allmulticast mode [ 553.739313][T12005] bridge_slave_0: entered promiscuous mode [ 553.803046][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.803159][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.803351][T12002] bridge_slave_1: entered allmulticast mode [ 554.224545][T12002] bridge_slave_1: entered promiscuous mode [ 554.846095][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.846226][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.846514][T12006] bridge_slave_0: entered allmulticast mode [ 554.850900][T12006] bridge_slave_0: entered promiscuous mode [ 554.856232][T12005] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.856340][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.856654][T12005] bridge_slave_1: entered allmulticast mode [ 554.859294][T12005] bridge_slave_1: entered promiscuous mode [ 555.803569][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.803690][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.809781][T12006] bridge_slave_1: entered allmulticast mode [ 555.820239][T12006] bridge_slave_1: entered promiscuous mode [ 556.532479][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.472482][T12005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.485644][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.688836][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.710455][T12005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.852460][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.656056][T12016] chnl_net:caif_netlink_parms(): no params data found [ 558.858938][T12002] team0: Port device team_slave_0 added [ 559.030935][T12005] team0: Port device team_slave_0 added [ 559.551066][T12002] team0: Port device team_slave_1 added [ 559.566704][T12006] team0: Port device team_slave_0 added [ 559.576662][T12005] team0: Port device team_slave_1 added [ 560.044464][T11931] syz-executor (11931) used greatest stack depth: 18424 bytes left [ 562.900937][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.139052][T12006] team0: Port device team_slave_1 added [ 565.877791][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.877810][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.877837][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.009010][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 566.033683][T12005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.033699][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.033721][T12005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.045713][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.045728][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.045750][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.049348][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.049362][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.049386][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.050637][T12005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.050648][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.050673][T12005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.113757][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 566.119651][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 566.120830][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.120845][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.120870][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.121053][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 566.122935][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 566.647196][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.647393][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.647628][T12016] bridge_slave_0: entered allmulticast mode [ 566.689032][T12016] bridge_slave_0: entered promiscuous mode [ 568.266233][ T5119] Bluetooth: hci1: command tx timeout [ 569.083625][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.083759][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.084553][T12016] bridge_slave_1: entered allmulticast mode [ 569.090923][T12016] bridge_slave_1: entered promiscuous mode [ 569.541429][T12002] hsr_slave_0: entered promiscuous mode [ 569.561954][T12002] hsr_slave_1: entered promiscuous mode [ 569.567619][T12002] debugfs: 'hsr0' already exists in 'hsr' [ 569.567654][T12002] Cannot create hsr debugfs directory [ 569.644773][T12005] hsr_slave_0: entered promiscuous mode [ 569.646268][T12005] hsr_slave_1: entered promiscuous mode [ 569.647215][T12005] debugfs: 'hsr0' already exists in 'hsr' [ 569.647238][T12005] Cannot create hsr debugfs directory [ 569.717628][T12006] hsr_slave_0: entered promiscuous mode [ 569.719096][T12006] hsr_slave_1: entered promiscuous mode [ 569.720037][T12006] debugfs: 'hsr0' already exists in 'hsr' [ 569.720061][T12006] Cannot create hsr debugfs directory [ 570.097051][T12016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.317918][T12016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.336053][ T5119] Bluetooth: hci1: command tx timeout [ 572.416319][ T5119] Bluetooth: hci1: command tx timeout [ 572.533316][T12016] team0: Port device team_slave_0 added [ 572.955968][T12016] team0: Port device team_slave_1 added [ 574.565429][ T5119] Bluetooth: hci1: command tx timeout [ 575.586608][T12016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.586626][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.586653][T12016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.902447][T12016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.902465][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.902492][T12016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.245307][T12016] hsr_slave_0: entered promiscuous mode [ 580.250911][T12016] hsr_slave_1: entered promiscuous mode [ 580.251870][T12016] debugfs: 'hsr0' already exists in 'hsr' [ 580.251892][T12016] Cannot create hsr debugfs directory [ 580.696255][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.768809][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.773732][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.927424][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.928183][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.452407][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 581.488636][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 581.499416][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 581.538592][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 581.545906][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 583.071049][ T5809] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 583.154605][ T5809] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 583.157562][ T5809] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 583.158970][ T5809] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 583.204197][ T5809] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 583.294390][ T5809] Bluetooth: hci6: command tx timeout [ 583.346274][T12049] chnl_net:caif_netlink_parms(): no params data found [ 583.714238][ T5119] Bluetooth: hci7: command tx timeout [ 585.374382][ T5119] Bluetooth: hci6: command tx timeout [ 585.534149][ T5119] Bluetooth: hci8: command tx timeout [ 585.789365][ T5119] Bluetooth: hci7: command tx timeout [ 587.454558][ T5119] Bluetooth: hci6: command tx timeout [ 587.622205][ T5119] Bluetooth: hci8: command tx timeout [ 587.854746][ T5119] Bluetooth: hci7: command tx timeout [ 589.502026][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.502226][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.502492][T12049] bridge_slave_0: entered allmulticast mode [ 589.532670][T12049] bridge_slave_0: entered promiscuous mode [ 589.534180][ T5119] Bluetooth: hci6: command tx timeout [ 589.983584][ T5119] Bluetooth: hci8: command tx timeout [ 589.983624][ T5119] Bluetooth: hci7: command tx timeout [ 590.073687][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.073848][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.124869][T12049] bridge_slave_1: entered allmulticast mode [ 590.149559][T12049] bridge_slave_1: entered promiscuous mode [ 591.485155][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.590176][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.094154][ T5119] Bluetooth: hci8: command tx timeout [ 592.146717][T12049] team0: Port device team_slave_0 added [ 592.261543][T12049] team0: Port device team_slave_1 added [ 593.427197][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.427214][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.427239][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.681862][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.681874][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.681888][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.921270][T12059] chnl_net:caif_netlink_parms(): no params data found [ 596.133787][T12061] chnl_net:caif_netlink_parms(): no params data found [ 596.238698][T12049] hsr_slave_0: entered promiscuous mode [ 596.251736][T12049] hsr_slave_1: entered promiscuous mode [ 596.264540][T12049] debugfs: 'hsr0' already exists in 'hsr' [ 596.264569][T12049] Cannot create hsr debugfs directory [ 597.466572][T11950] syz-executor (11950) used greatest stack depth: 18320 bytes left [ 597.628486][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.671874][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.681411][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.699282][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.723051][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.135701][T12059] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.135907][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.136192][T12059] bridge_slave_0: entered allmulticast mode [ 598.145868][T12059] bridge_slave_0: entered promiscuous mode [ 598.149183][T12069] chnl_net:caif_netlink_parms(): no params data found [ 599.786151][ T5119] Bluetooth: hci3: command tx timeout [ 601.047971][ T39] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.793332][T12059] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.811525][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.811863][T12059] bridge_slave_1: entered allmulticast mode [ 601.822206][T12059] bridge_slave_1: entered promiscuous mode [ 601.854198][ T5119] Bluetooth: hci3: command tx timeout [ 603.527029][T12059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.637160][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.637297][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.637585][T12061] bridge_slave_0: entered allmulticast mode [ 603.643164][T12061] bridge_slave_0: entered promiscuous mode [ 603.897736][T12059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.932094][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.932215][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.932511][T12061] bridge_slave_1: entered allmulticast mode [ 603.934184][ T5119] Bluetooth: hci3: command tx timeout [ 603.967898][T12061] bridge_slave_1: entered promiscuous mode [ 606.014527][ T5119] Bluetooth: hci3: command tx timeout [ 606.181937][T12059] team0: Port device team_slave_0 added [ 606.330048][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.888122][T12059] team0: Port device team_slave_1 added [ 606.892512][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.892936][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.893128][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.893367][T12069] bridge_slave_0: entered allmulticast mode [ 606.896875][T12069] bridge_slave_0: entered promiscuous mode [ 607.034770][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.034861][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.035096][T12069] bridge_slave_1: entered allmulticast mode [ 607.040762][T12069] bridge_slave_1: entered promiscuous mode [ 607.768654][T12059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.768672][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.768714][T12059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.332440][T12061] team0: Port device team_slave_0 added [ 608.485202][T12059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.485220][T12059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.485247][T12059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.488635][T12061] team0: Port device team_slave_1 added [ 608.493126][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.776942][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.619825][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.619842][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.619869][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.911719][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.911736][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.911763][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.928997][T12069] team0: Port device team_slave_0 added [ 610.114984][T12069] team0: Port device team_slave_1 added [ 610.150251][T12059] hsr_slave_0: entered promiscuous mode [ 610.190132][T12059] hsr_slave_1: entered promiscuous mode [ 610.196126][T12059] debugfs: 'hsr0' already exists in 'hsr' [ 610.196152][T12059] Cannot create hsr debugfs directory [ 611.668775][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.668794][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.668821][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.709942][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.709962][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.709989][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.918817][T12061] hsr_slave_0: entered promiscuous mode [ 612.924973][T12061] hsr_slave_1: entered promiscuous mode [ 612.949791][T12061] debugfs: 'hsr0' already exists in 'hsr' [ 612.949820][T12061] Cannot create hsr debugfs directory [ 615.910936][T12069] hsr_slave_0: entered promiscuous mode [ 615.912586][T12069] hsr_slave_1: entered promiscuous mode [ 615.913634][T12069] debugfs: 'hsr0' already exists in 'hsr' [ 615.913657][T12069] Cannot create hsr debugfs directory [ 616.211719][T12088] chnl_net:caif_netlink_parms(): no params data found [ 622.296517][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.296635][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.296895][T12088] bridge_slave_0: entered allmulticast mode [ 622.334531][T12088] bridge_slave_0: entered promiscuous mode [ 622.553643][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.553807][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.554652][T12088] bridge_slave_1: entered allmulticast mode [ 622.641544][T12088] bridge_slave_1: entered promiscuous mode [ 623.120404][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.276272][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.245222][T12088] team0: Port device team_slave_0 added [ 624.249315][T12088] team0: Port device team_slave_1 added [ 624.356840][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.495378][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.495395][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.495421][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.501648][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.501665][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.501692][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.274934][T12088] hsr_slave_0: entered promiscuous mode [ 625.293409][T12088] hsr_slave_1: entered promiscuous mode [ 625.315688][T12088] debugfs: 'hsr0' already exists in 'hsr' [ 625.315716][T12088] Cannot create hsr debugfs directory [ 627.138648][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 627.193169][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 627.218819][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 627.251415][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 627.256573][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.539310][ T5809] Bluetooth: hci4: command tx timeout [ 631.694668][T12008] Bluetooth: hci2: command 0x0406 tx timeout [ 631.694830][T12008] Bluetooth: hci4: command tx timeout [ 632.352036][T12109] chnl_net:caif_netlink_parms(): no params data found [ 633.417381][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.417502][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.439862][T12109] bridge_slave_0: entered allmulticast mode [ 633.465627][T12109] bridge_slave_0: entered promiscuous mode [ 633.525364][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.527069][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.527433][T12109] bridge_slave_1: entered allmulticast mode [ 633.559980][T12109] bridge_slave_1: entered promiscuous mode [ 633.774208][ T5809] Bluetooth: hci4: command tx timeout [ 633.885391][T12109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.910465][T12109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.211950][T12109] team0: Port device team_slave_0 added [ 635.245326][T12109] team0: Port device team_slave_1 added [ 635.529230][T12109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.529248][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.529276][T12109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.598011][T12109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.598029][T12109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.603229][T12109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.056898][ T5119] Bluetooth: hci4: command tx timeout [ 636.594595][T12109] hsr_slave_0: entered promiscuous mode [ 636.600843][T12109] hsr_slave_1: entered promiscuous mode [ 636.606997][T12109] debugfs: 'hsr0' already exists in 'hsr' [ 636.607023][T12109] Cannot create hsr debugfs directory [ 640.273925][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 640.336955][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 640.338178][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 640.355318][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 640.356587][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 641.806811][ T5809] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 641.872225][ T5809] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 641.926759][ T5809] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 641.946621][ T5809] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 641.962452][ T5809] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 642.494194][ T5809] Bluetooth: hci9: command tx timeout [ 643.668091][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 644.023789][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 644.047770][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 644.057188][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 644.063569][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 644.103602][T12008] Bluetooth: hci10: command tx timeout [ 644.581788][ T5809] Bluetooth: hci9: command tx timeout [ 646.184559][ T5809] Bluetooth: hci10: command tx timeout [ 646.265029][ T5809] Bluetooth: hci11: command tx timeout [ 646.728868][ T5809] Bluetooth: hci9: command tx timeout [ 646.902465][ T5809] Bluetooth: hci5: command 0x0406 tx timeout [ 648.254210][ T5119] Bluetooth: hci10: command tx timeout [ 648.334167][ T5119] Bluetooth: hci11: command tx timeout [ 648.734281][ T5119] Bluetooth: hci9: command tx timeout [ 649.453523][T12129] chnl_net:caif_netlink_parms(): no params data found [ 650.441035][ T5119] Bluetooth: hci10: command tx timeout [ 650.441074][ T5119] Bluetooth: hci11: command tx timeout [ 651.717553][T12124] chnl_net:caif_netlink_parms(): no params data found [ 652.472935][T12132] chnl_net:caif_netlink_parms(): no params data found [ 652.494166][ T5809] Bluetooth: hci11: command tx timeout [ 653.494885][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.495008][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.495363][T12129] bridge_slave_0: entered allmulticast mode [ 653.523019][T12129] bridge_slave_0: entered promiscuous mode [ 653.650014][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.650193][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.650541][T12129] bridge_slave_1: entered allmulticast mode [ 653.667065][T12129] bridge_slave_1: entered promiscuous mode [ 653.677291][T12124] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.677405][T12124] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.677749][T12124] bridge_slave_0: entered allmulticast mode [ 653.691668][T12124] bridge_slave_0: entered promiscuous mode [ 654.316878][T12124] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.317025][T12124] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.317304][T12124] bridge_slave_1: entered allmulticast mode [ 654.323527][T12124] bridge_slave_1: entered promiscuous mode [ 656.307279][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.376307][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.376428][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.376730][T12132] bridge_slave_0: entered allmulticast mode [ 656.396922][T12132] bridge_slave_0: entered promiscuous mode [ 656.453228][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.480888][T12124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.486236][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.486356][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.486681][T12132] bridge_slave_1: entered allmulticast mode [ 656.509325][T12132] bridge_slave_1: entered promiscuous mode [ 656.601738][T12124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.037148][T12129] team0: Port device team_slave_0 added [ 657.175315][T12129] team0: Port device team_slave_1 added [ 657.208516][T12132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.835904][T12124] team0: Port device team_slave_0 added [ 658.860119][ T5119] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 658.862974][ T5119] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 658.878981][ T5119] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 658.907443][ T5119] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 658.911023][ T5119] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 658.987564][T12132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.997425][T12124] team0: Port device team_slave_1 added [ 659.305838][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.305856][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.305882][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.543208][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.543225][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.543252][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.779463][T12132] team0: Port device team_slave_0 added [ 659.805414][T12124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.805431][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.805454][T12124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.982730][T12132] team0: Port device team_slave_1 added [ 660.527606][T12124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.527623][T12124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.527659][T12124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.074136][ T5809] Bluetooth: hci12: command tx timeout [ 661.503846][T12132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.503864][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.503891][T12132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.839046][T12132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.839063][T12132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.839090][T12132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.936842][T12129] hsr_slave_0: entered promiscuous mode [ 661.943439][T12129] hsr_slave_1: entered promiscuous mode [ 661.949273][T12129] debugfs: 'hsr0' already exists in 'hsr' [ 661.949299][T12129] Cannot create hsr debugfs directory [ 662.285252][T12124] hsr_slave_0: entered promiscuous mode [ 662.286954][T12124] hsr_slave_1: entered promiscuous mode [ 662.288034][T12124] debugfs: 'hsr0' already exists in 'hsr' [ 662.288058][T12124] Cannot create hsr debugfs directory [ 662.334139][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 663.134132][ T5809] Bluetooth: hci12: command tx timeout [ 664.230025][T12132] hsr_slave_0: entered promiscuous mode [ 664.236658][T12132] hsr_slave_1: entered promiscuous mode [ 664.240889][T12132] debugfs: 'hsr0' already exists in 'hsr' [ 664.240915][T12132] Cannot create hsr debugfs directory [ 665.219565][ T5119] Bluetooth: hci12: command tx timeout [ 667.294190][ T5119] Bluetooth: hci12: command tx timeout [ 670.345354][T12153] chnl_net:caif_netlink_parms(): no params data found [ 671.921938][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.922138][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.922495][T12153] bridge_slave_0: entered allmulticast mode [ 671.958219][T12153] bridge_slave_0: entered promiscuous mode [ 671.978249][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.978371][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.978736][T12153] bridge_slave_1: entered allmulticast mode [ 672.141378][T12153] bridge_slave_1: entered promiscuous mode [ 672.552053][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.569260][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.219969][T12153] team0: Port device team_slave_0 added [ 673.225058][T12153] team0: Port device team_slave_1 added [ 673.520655][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.520672][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.520699][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.523032][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.523046][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.523071][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.842086][T12153] hsr_slave_0: entered promiscuous mode [ 674.843730][T12153] hsr_slave_1: entered promiscuous mode [ 674.889496][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 674.889524][T12153] Cannot create hsr debugfs directory [ 685.779026][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.757730][ T5809] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 687.811670][ T5809] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 687.853635][ T5809] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 687.881527][ T5809] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 687.899470][ T5809] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 689.934439][ T5119] Bluetooth: hci13: command tx timeout [ 692.014548][ T5809] Bluetooth: hci13: command tx timeout [ 692.297952][ T39] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.974496][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 694.094593][ T5119] Bluetooth: hci13: command tx timeout [ 694.711455][T12166] chnl_net:caif_netlink_parms(): no params data found [ 695.711927][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.724320][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.724717][T12166] bridge_slave_0: entered allmulticast mode [ 695.732367][T12166] bridge_slave_0: entered promiscuous mode [ 695.885345][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.888314][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.888739][T12166] bridge_slave_1: entered allmulticast mode [ 695.921911][T12166] bridge_slave_1: entered promiscuous mode [ 696.242956][ T5119] Bluetooth: hci13: command tx timeout [ 696.547704][T12166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.819936][T12166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.063646][T12166] team0: Port device team_slave_0 added [ 697.089425][T12166] team0: Port device team_slave_1 added [ 697.347270][T12166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.347282][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.347296][T12166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.353500][T12166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.353517][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.353543][T12166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.146735][T12166] hsr_slave_0: entered promiscuous mode [ 699.148569][T12166] hsr_slave_1: entered promiscuous mode [ 699.149645][T12166] debugfs: 'hsr0' already exists in 'hsr' [ 699.149669][T12166] Cannot create hsr debugfs directory [ 701.370588][ T5809] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 701.376096][ T5809] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 701.424310][ T5809] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 701.427930][ T5809] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 701.429437][ T5809] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 702.510448][ T5119] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 702.557963][ T5119] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 702.559279][ T5119] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 702.593224][ T5119] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 702.604341][ T5119] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 703.784204][ T5119] Bluetooth: hci14: command tx timeout [ 704.741695][ T5119] Bluetooth: hci15: command tx timeout [ 704.748307][ T5119] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 704.804477][ T5119] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 704.806273][ T5119] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 704.822476][ T5119] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 704.827059][ T5119] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 705.880968][ T5809] Bluetooth: hci14: command tx timeout [ 706.814276][T12197] Bluetooth: hci15: command tx timeout [ 707.058313][T12197] Bluetooth: hci16: command tx timeout [ 707.903398][T12185] chnl_net:caif_netlink_parms(): no params data found [ 707.934376][T12197] Bluetooth: hci14: command tx timeout [ 708.614201][T12197] Bluetooth: hci6: command 0x0406 tx timeout [ 708.614247][T12197] Bluetooth: hci8: command 0x0406 tx timeout [ 708.614274][T12197] Bluetooth: hci7: command 0x0406 tx timeout [ 709.314135][T12010] Bluetooth: hci15: command tx timeout [ 709.314171][T12010] Bluetooth: hci16: command tx timeout [ 710.381718][T12197] Bluetooth: hci14: command tx timeout [ 711.375091][ T5809] Bluetooth: hci16: command tx timeout [ 711.375124][ T5809] Bluetooth: hci15: command tx timeout [ 711.611385][T12190] chnl_net:caif_netlink_parms(): no params data found [ 713.129031][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.129216][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.129613][T12185] bridge_slave_0: entered allmulticast mode [ 713.132549][T12185] bridge_slave_0: entered promiscuous mode [ 713.302620][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.341027][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.356529][T12185] bridge_slave_1: entered allmulticast mode [ 713.451983][T12185] bridge_slave_1: entered promiscuous mode [ 713.454122][T12008] Bluetooth: hci16: command tx timeout [ 714.602071][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.602314][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.602416][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.602702][T12190] bridge_slave_0: entered allmulticast mode [ 714.645139][T12190] bridge_slave_0: entered promiscuous mode [ 714.825865][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.826236][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.826351][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.826737][T12190] bridge_slave_1: entered allmulticast mode [ 714.866209][T12190] bridge_slave_1: entered promiscuous mode [ 715.910348][T12185] team0: Port device team_slave_0 added [ 716.040739][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.141458][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.157986][T12185] team0: Port device team_slave_1 added [ 717.086928][T12190] team0: Port device team_slave_0 added [ 717.091337][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.091354][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.091378][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.092226][T12193] chnl_net:caif_netlink_parms(): no params data found [ 717.108572][T12190] team0: Port device team_slave_1 added [ 717.112574][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.112589][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.112614][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.250459][T12190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.250476][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.250502][T12190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.339905][T12190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.339922][T12190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.339948][T12190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.505074][T12185] hsr_slave_0: entered promiscuous mode [ 717.506866][T12185] hsr_slave_1: entered promiscuous mode [ 717.508046][T12185] debugfs: 'hsr0' already exists in 'hsr' [ 717.508070][T12185] Cannot create hsr debugfs directory [ 717.652677][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.652936][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.653250][T12193] bridge_slave_0: entered allmulticast mode [ 717.681534][T12193] bridge_slave_0: entered promiscuous mode [ 717.715223][T12190] hsr_slave_0: entered promiscuous mode [ 717.717147][T12190] hsr_slave_1: entered promiscuous mode [ 717.718461][T12190] debugfs: 'hsr0' already exists in 'hsr' [ 717.718486][T12190] Cannot create hsr debugfs directory [ 717.766410][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.766530][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.766800][T12193] bridge_slave_1: entered allmulticast mode [ 717.770681][T12193] bridge_slave_1: entered promiscuous mode [ 718.190299][T12193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.506751][ T60] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 721.594868][ T60] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 721.602105][ T60] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 721.634272][ T60] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 721.637060][ T5809] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 722.538658][T12193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.694099][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 723.774211][ T5809] Bluetooth: hci17: command tx timeout [ 724.028009][T12193] team0: Port device team_slave_0 added [ 724.233497][T12193] team0: Port device team_slave_1 added [ 724.814646][ T37] INFO: task syz-executor:12006 blocked for more than 143 seconds. [ 724.814668][ T37] Not tainted syzkaller #0 [ 724.814678][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.814688][ T37] task:syz-[ 724.814688][ T37] task:syz-executor state:D stack:19128 pid:12006 tgid:12006 ppid:1 task_flags:0x400140 flags:0x00080002 [ 724.814741][ T37] Call Trace: [ 724.814748][ T37] [ 724.814759][ T37] __schedule+0x1681/0x54c0 [ 724.814808][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.814843][ T37] ? __pfx___schedule+0x10/0x10 [ 724.814866][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 724.814903][ T37] rt_mutex_schedule+0x76/0xf0 [ 724.814930][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 724.814964][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 724.814989][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 724.815013][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 724.815036][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 724.815068][ T37] ? del_device_store+0xd7/0x370 [ 724.815092][ T37] ? del_device_store+0xd7/0x370 [ 724.815116][ T37] ? del_device_store+0xd7/0x370 [ 724.815132][ T37] mutex_lock_nested+0x168/0x1d0 [ 724.815159][ T37] del_device_store+0xd7/0x370 [ 724.815176][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 724.815197][ T37] ? __pfx_del_device_store+0x10/0x10 [ 724.815215][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 724.815235][ T37] ? sysfs_kf_write+0x166/0x260 [ 724.815267][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 724.815285][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 724.815319][ T37] vfs_write+0x629/0xba0 [ 724.815354][ T37] ? __pfx_vfs_write+0x10/0x10 [ 724.815382][ T37] ? do_sys_openat2+0x14c/0x200 [ 724.815402][ T37] ? kmem_cache_free+0x187/0x6c0 [ 724.815445][ T37] ksys_write+0x156/0x270 [ 724.815473][ T37] ? __pfx_ksys_write+0x10/0x10 [ 724.815506][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.815528][ T37] do_syscall_64+0x15f/0xf80 [ 724.815554][ T37] ? trace_irq_disable+0x3b/0x140 [ 724.815582][ T37] ? clear_bhb_loop+0x40/0x90 [ 724.815606][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.815626][ T37] RIP: 0033:0x7f71b512d04e [ 724.815645][ T37] RSP: 002b:00007fff5c087e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 724.815665][ T37] RAX: ffffffffffffffda RBX: 000055557cd07500 RCX: 00007f71b512d04e [ 724.815679][ T37] RDX: 0000000000000001 RSI: 00007fff5c087ef0 RDI: 0000000000000005 [ 724.815691][ T37] RBP: 00007f71b5203514 R08: 0000000000000000 R09: 0000000000000000 [ 724.815704][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.815716][ T37] R13: 00007fff5c087ef0 R14: 00007f71b5f14620 R15: 0000000000000003 [ 724.815747][ T37] [ 724.815814][ T37] [ 724.815814][ T37] Showing all locks held in the system: [ 724.815827][ T37] 4 locks held by rcuc/0/20: [ 724.815838][ T37] 6 locks held by ksoftirqd/1/30: [ 724.815850][ T37] 1 lock held by khungtaskd/37: [ 724.815860][ T37] #0: ffffffff8dfc7ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 724.815910][ T37] 6 locks held by kworker/u8:2/39: [ 724.815921][ T37] #0: ffff88801b2a0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 724.815974][ T37] #1: ffffc90000b07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 724.816026][ T37] #2: ffffffff8f355200 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 724.816071][ T37] #3: ffff88803f607160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 724.816121][ T37] #4: ffff888024ff6310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 724.816170][ T37] #5: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 724.816248][ T37] 2 locks held by getty/5560: [ 724.816259][ T37] #0: ffff888037cb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 724.816304][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 724.816360][ T37] 4 locks held by kworker/u8:8/9881: [ 724.816374][ T37] 7 locks held by syz-executor/11983: [ 724.816385][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.816439][ T37] #1: ffff88805c83ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.816562][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.816618][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.816661][ T37] #4: ffff888037a36160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 724.816708][ T37] #5: ffff8880264f8310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 724.816759][ T37] #6: ffffffff8dfce070 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 724.816810][ T37] 4 locks held by syz-executor/12006: [ 724.816821][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.816874][ T37] #1: ffff88803c483078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.816926][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.816982][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.817026][ T37] 4 locks held by syz-executor/12016: [ 724.817037][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.817089][ T37] #1: ffff888057f4b478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.817142][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.817197][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.817249][ T37] 4 locks held by syz-executor/12049: [ 724.817260][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.817313][ T37] #1: ffff888066c62c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.817365][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.817419][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.817459][ T37] 4 locks held by syz-executor/12059: [ 724.817469][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.817518][ T37] #1: ffff88803d7cbc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.817564][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.817619][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.817660][ T37] 4 locks held by syz-executor/12061: [ 724.817672][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.817721][ T37] #1: ffff88806cc75478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.817768][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.817816][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.817859][ T37] 4 locks held by syz-executor/12069: [ 724.817869][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.817919][ T37] #1: ffff88806e485078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.817968][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.818019][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.818060][ T37] 4 locks held by syz-executor/12088: [ 724.818069][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.818116][ T37] #1: ffff888041be2478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.818166][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.818215][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.818267][ T37] 4 locks held by syz-executor/12109: [ 724.818278][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.818330][ T37] #1: ffff88802269f478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.818381][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.818434][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.818494][ T37] 4 locks held by syz-executor/12124: [ 724.820547][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.820610][ T37] #1: ffff888057942878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.820661][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.820717][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.820763][ T37] 4 locks held by syz-executor/12129: [ 724.820775][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.820828][ T37] #1: ffff8880568de078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.820878][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.820929][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.820972][ T37] 4 locks held by syz-executor/12132: [ 724.820983][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.821036][ T37] #1: ffff888055efe078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.821087][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.821143][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.821188][ T37] 4 locks held by syz-executor/12153: [ 724.821199][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.821256][ T37] #1: ffff8880550a1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.821307][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.821362][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.821406][ T37] 4 locks held by syz-executor/12166: [ 724.821417][ T37] #0: ffff888038846480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 724.821469][ T37] #1: ffff88806a4df878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 724.821519][ T37] #2: ffff8880291e2b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 724.821574][ T37] #3: ffffffff8ebcc3f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 724.821618][ T37] 2 locks held by syz-executor/12185: [ 724.821630][ T37] #0: ffffffff8f8b6628 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 724.821678][ T37] #1: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 724.821722][ T37] 3 locks held by syz-executor/12190: [ 724.821733][ T37] 1 lock held by syz-executor/12193: [ 724.821744][ T37] #0: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 724.821790][ T37] 2 locks held by syz-executor/12217: [ 724.821801][ T37] #0: ffffffff8f355200 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 724.821845][ T37] #1: ffffffff8f363af8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 724.821894][ T37] [ 724.821899][ T37] ============================================= [ 724.821899][ T37] [ 724.821918][ T37] NMI backtrace for cpu 0 [ 724.821931][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.821954][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 724.821965][ T37] Call Trace: [ 724.821972][ T37] [ 724.821980][ T37] dump_stack_lvl+0xe8/0x150 [ 724.822011][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 724.822032][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 724.822063][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 724.822087][ T37] sys_info+0x135/0x170 [ 724.822116][ T37] watchdog+0xfaa/0x1000 [ 724.822149][ T37] ? watchdog+0x209/0x1000 [ 724.822182][ T37] kthread+0x388/0x470 [ 724.822204][ T37] ? __pfx_watchdog+0x10/0x10 [ 724.822228][ T37] ? __pfx_kthread+0x10/0x10 [ 724.822257][ T37] ret_from_fork+0x514/0xb70 [ 724.822288][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 724.822316][ T37] ? __switch_to+0xc79/0x1410 [ 724.822342][ T37] ? __pfx_kthread+0x10/0x10 [ 724.822364][ T37] ret_from_fork_asm+0x1a/0x30 [ 724.822398][ T37] [ 724.822405][ T37] Sending NMI from CPU 0 to CPUs 1: [ 724.822430][ C1] NMI backtrace for cpu 1 [ 724.822444][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.822464][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 724.822475][ C1] RIP: 0010:unwind_next_frame+0x23b/0x2550 [ 724.822505][ C1] Code: b6 04 28 84 c0 48 89 eb 0f 85 85 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 fc 26 bd 90 48 89 e8 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 85 1d 00 00 44 8b 45 00 41 ff c0 4a 8d 04 6d 00 00 00 [ 724.822520][ C1] RSP: 0018:ffffc90000a4eb58 EFLAGS: 00000a06 [ 724.822536][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 724.822549][ C1] RDX: 00000000000a2cfc RSI: ffffffff8ba70360 RDI: ffffffff8ba70320 [ 724.822562][ C1] RBP: ffffffff90df45e8 R08: ffffffff81765576 R09: ffffffff8dfc7ec0 [ 724.822575][ C1] R10: ffffc90000a4ec78 R11: ffffffff81aef0c0 R12: ffffffff8987baa5 [ 724.822588][ C1] R13: 000000000017ce7f R14: ffffc90000a4ec28 R15: 00000000000887ba [ 724.822601][ C1] FS: 0000000000000000(0000) GS:ffff888126215000(0000) knlGS:0000000000000000 [ 724.822615][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 724.822627][ C1] CR2: 00007ffd31b95c5f CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 724.822643][ C1] Call Trace: [ 724.822649][ C1] [ 724.822660][ C1] ? unwind_next_frame+0xa6/0x2550 [ 724.822679][ C1] ? NF_HOOK+0x336/0x3c0 [ 724.822708][ C1] ? NF_HOOK+0x336/0x3c0 [ 724.822731][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 724.822757][ C1] arch_stack_walk+0x11b/0x150 [ 724.822778][ C1] ? NF_HOOK+0x336/0x3c0 [ 724.822801][ C1] ? __alloc_skb+0x27d/0x7d0 [ 724.822819][ C1] stack_trace_save+0xa9/0x100 [ 724.822843][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 724.822869][ C1] ? stack_depot_save_flags+0x33/0x810 [ 724.822895][ C1] ? __alloc_skb+0x1d0/0x7d0 [ 724.822913][ C1] kasan_save_track+0x3e/0x80 [ 724.822933][ C1] ? kasan_save_track+0x3e/0x80 [ 724.822953][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 724.822978][ C1] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 724.823001][ C1] ? __alloc_skb+0x27d/0x7d0 [ 724.823017][ C1] ? synproxy_send_client_synack+0x172/0xe30 [ 724.823043][ C1] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 724.823064][ C1] ? nft_synproxy_do_eval+0x305/0x580 [ 724.823084][ C1] ? nft_do_chain+0x467/0x19f0 [ 724.823106][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 724.823127][ C1] ? nf_hook_slow+0xc5/0x220 [ 724.823147][ C1] ? NF_HOOK+0x21f/0x3c0 [ 724.823167][ C1] ? NF_HOOK+0x336/0x3c0 [ 724.823211][ C1] __kasan_slab_alloc+0x6c/0x80 [ 724.823234][ C1] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 724.823257][ C1] ? __alloc_skb+0x27d/0x7d0 [ 724.823284][ C1] __alloc_skb+0x27d/0x7d0 [ 724.823308][ C1] synproxy_send_client_synack+0x172/0xe30 [ 724.823341][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 724.823362][ C1] ? nft_synproxy_destroy+0x10/0x20 [ 724.823387][ C1] ? synproxy_pernet+0x45/0x270 [ 724.823412][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 724.823436][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 724.823460][ C1] ? nf_ip_checksum+0x13c/0x510 [ 724.823490][ C1] nft_synproxy_do_eval+0x305/0x580 [ 724.823520][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 724.823550][ C1] nft_do_chain+0x467/0x19f0 [ 724.823577][ C1] ? rcu_is_watching+0x15/0xb0 [ 724.823600][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 724.823637][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 724.823659][ C1] nft_do_chain_inet+0x360/0x4b0 [ 724.823683][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 724.823710][ C1] ? NF_HOOK+0x9e/0x3c0 [ 724.823732][ C1] ? NF_HOOK+0x9e/0x3c0 [ 724.823754][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 724.823777][ C1] nf_hook_slow+0xc5/0x220 [ 724.823799][ C1] NF_HOOK+0x21f/0x3c0 [ 724.823822][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 724.823845][ C1] ? NF_HOOK+0x9e/0x3c0 [ 724.823866][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 724.823887][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 724.823912][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 724.823938][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 724.823962][ C1] NF_HOOK+0x336/0x3c0 [ 724.823982][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.824005][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 724.824027][ C1] ? NF_HOOK+0x9e/0x3c0 [ 724.824049][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 724.824072][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 724.824103][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 724.824124][ C1] ? process_backlog+0x271/0xc60 [ 724.824139][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 724.824162][ C1] process_backlog+0x569/0xc60 [ 724.824188][ C1] __napi_poll+0xab/0x550 [ 724.824218][ C1] net_rx_action+0x696/0xe00 [ 724.824242][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 724.824257][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 724.824285][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 724.824315][ C1] handle_softirqs+0x1de/0x6d0 [ 724.824344][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 724.824369][ C1] run_ksoftirqd+0x52/0x180 [ 724.824385][ C1] smpboot_thread_fn+0x541/0xa50 [ 724.824411][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 724.824441][ C1] kthread+0x388/0x470 [ 724.824459][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 724.824483][ C1] ? __pfx_kthread+0x10/0x10 [ 724.824507][ C1] ret_from_fork+0x514/0xb70 [ 724.824537][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 724.824568][ C1] ? __switch_to+0xc79/0x1410 [ 724.824590][ C1] ? __pfx_kthread+0x10/0x10 [ 724.824609][ C1] ret_from_fork_asm+0x1a/0x30 [ 724.824634][ C1] [ 724.850146][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 724.850168][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.850190][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 724.850203][ T37] Call Trace: [ 724.850210][ T37] [ 724.850219][ T37] vpanic+0x56c/0xa60 [ 724.850249][ T37] ? __pfx___schedule+0x10/0x10 [ 724.850275][ T37] ? __pfx_vpanic+0x10/0x10 [ 724.850301][ T37] panic+0xc5/0xd0 [ 724.850318][ T37] ? __pfx_panic+0x10/0x10 [ 724.850336][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 724.850365][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 724.850390][ T37] watchdog+0xff4/0x1000 [ 724.850420][ T37] ? watchdog+0x209/0x1000 [ 724.850451][ T37] kthread+0x388/0x470 [ 724.850471][ T37] ? __pfx_watchdog+0x10/0x10 [ 724.850494][ T37] ? __pfx_kthread+0x10/0x10 [ 724.850515][ T37] ret_from_fork+0x514/0xb70 [ 724.850545][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 724.850572][ T37] ? __switch_to+0xc79/0x1410 [ 724.850598][ T37] ? __pfx_kthread+0x10/0x10 [ 724.850618][ T37] ret_from_fork_asm+0x1a/0x30 [ 724.850651][ T37] [ 724.851088][ T37] Kernel Offset: disabled